update permission on GitHub Token

microsoft · Feb 6, 2024 · d3f8bd4 · d3f8bd4
1 parent 0c7e46a
commit d3f8bd4
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/.github/workflows/azure-static-web-apps-purple-hill-04aebfb03.yml b/.github/workflows/azure-static-web-apps-purple-hill-04aebfb03.yml
@@ -14,6 +14,13 @@ jobs:
  if: github.event_name == 'push' || (github.event_name == 'pull_request' && github.event.action != 'closed')
  runs-on: ubuntu-latest
  name: Build and Deploy Job
+ permissions:
+ actions: read
+ contents: read
+ deployments: read
+ packages: none
+ pull-requests: write
+ security-events: write
  steps:
  - uses: actions/checkout@v2
  with:
@@ -35,6 +42,13 @@ jobs:
  close_pull_request_job:
  if: github.event_name == 'pull_request' && github.event.action == 'closed'
  runs-on: ubuntu-latest
+ permissions:
+ actions: read
+ contents: read
+ deployments: read
+ packages: none
+ pull-requests: write
+ security-events: write
  name: Close Pull Request Job
  steps:
  - name: Close Pull Request